hub: return 404 status for unknown frontend routes (#2414)

internal/hub/server_test.go

@@ -0,0 +1,59 @@
+//go:build testing
+
+package hub
+
+import (
+	"testing"
+
+	"github.com/stretchr/testify/assert"
+)
+
+func TestIsAppRoute(t *testing.T) {
+	tests := []struct {
+		path     string
+		basePath string
+		want     bool
+	}{
+		// known routes
+		{"/", "/", true},
+		{"/containers", "/", true},
+		{"/containers/", "/", true},
+		{"/Containers", "/", true},
+		{"/smart", "/", true},
+		{"/monitors", "/", true},
+		{"/forgot-password", "/", true},
+		{"/request-otp", "/", true},
+		{"/system/abc123", "/", true},
+		{"/system/abc123/", "/", true},
+		{"/settings", "/", true},
+		{"/settings/general", "/", true},
+
+		// unknown paths
+		{"/.env", "/", false},
+		{"/phpinfo.php", "/", false},
+		{"/wp-admin/", "/", false},
+		{"/.git/config", "/", false},
+		{"/system", "/", false},
+		{"/system/", "/", false},
+		{"/system/abc/def", "/", false},
+		{"/settings/general/extra", "/", false},
+		{"/containersx", "/", false},
+
+		// base path, prefix not stripped by proxy
+		{"/beszel", "/beszel/", true},
+		{"/beszel/", "/beszel/", true},
+		{"/beszel/containers", "/beszel/", true},
+		{"/beszel/system/abc123", "/beszel/", true},
+		{"/beszel/.env", "/beszel/", false},
+		{"/beszelx", "/beszel/", false},
+
+		// base path, prefix stripped by proxy
+		{"/", "/beszel/", true},
+		{"/containers", "/beszel/", true},
+		{"/.env", "/beszel/", false},
+	}
+
+	for _, tt := range tests {
+		assert.Equal(t, tt.want, isAppRoute(tt.path, tt.basePath), "path=%q basePath=%q", tt.path, tt.basePath)
+	}
+}